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Attorney Docket No.: EMC04-07(0403 1) 

METHODS AND APPARATUS FOR MANAGING RESOURCES 

15 BACKGROUND 

Certain conventional computer devices include software to generate Graphical 
User Interfaces (GUI) that enable network managers to graphically manage, control and 
configure various types of hardware and software resources associated with a 
corresponding managed storage area network. In one conventional application, a 

20 network management storage application renders a graphical user interface enabling a 
network manager to graphically select, interact with, and manage local or remote devices 
and associated software processes operating in a storage area network. More specifically, 
based on use of the graphical user interface in combination with an input device such as a 
hand operated mouse and corresponding pointer displayed on a viewing screen, a 

25 network manager is able to manage hardware and software entities such as file systems, 
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databases, storage devices, network data communications devices, etc. associated with 
the storage area network. Typically, in such network management applications, the 
network manager selects a displayed icon representing a corresponding managed resource 
in the network and applies management commands to carry out intended management 
5 functions. 

Conventional network management applications are designed to provide a 
network manager with information regarding access rights associated with clients in a 
network. For example, a network may include a number of hardware devices such as 
host computers, servers, data communications devices (e.g., switches, routers, etc.), 

10 network attached storage devices, proxy devices, firewall devices, and so forth that are 
coupled amongst each other via physical cables. A conventional management application 
typically provides access to a database of data structures describing and defining how 
these hardware resources are interconnected and, more specifically, which host 
computers are able to access which storage devices in a storage system. At any given 

1 5 time, the network manager can view and change access right information associated with 
the managed network resources via use of the network management application. Thus, 
the network manager has the ultimate power to grant and deny access rights to 
corresponding storage systems. 

Over time, a managed storage system may grow to include network resources 

20 associated with different vendors. For example, a storage area network may grow (based 
on increased storage needs of the owner) to include storage systems manufactured by two 
or more vendors. Each vendor typically requires that its manufactured products 
communicate via use of a corresponding vendor specific protocol. For example, a 
Hitachi storage system typically requires use of Hitachi specific commands to control 

25 settings of the Hitachi storage device. Similarly, an IBM (International Business 

Machines) storage system requires use of IBM specific commands to control settings of 
the IBM storage device, and so on. 

To manage storage system resources associated with multiple vendors according 
to conventional techniques, the network manager must utilize different network 

30 management software applications, one for each vendor type of storage system. Each of 
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the network management software applications supports unique, vendor specific display 
information and views to manage settings of a corresponding type of vendors storage 
system. 

5 SUMMARY 

Conventional network management software applications that support 
management of network resources such as host computers with respect to corresponding 
storage system resources suffer from a variety of deficiencies. For example, as 
mentioned, conventional storage management software applications typically support 

1 0 management of storage systems for only a single, specific vendor type. This complicates 
a job associated with management of a large storage area network such as one including 
that include storage systems manufactured by multiple vendors because the network 
manager must utilize different software applications to manage settings of different 
vendor types of storage systems in the storage area network. 

1 5 For example, to adjust settings for each of multiple storage system vendor types, 

the network manager must be trained to use multiple types of vendor software 
applications. Even if a network manager is skilled at using the different network 
manager software applications, the network manager must open and execute different 
applications in order to modify access settings for two or more different types of storage 

20 systems. Executing two or more network manager software applications typically 

requires more time than utilizing a single application. Thus, use of conventional software 
applications inhibits how quickly settings such as access control settings of a storage 
system can be updated. In certain cases, time is of the essence. For example, integrity of 
a storage system may be at risk such as when a network manager cannot quickly change 

25 access rights associated with a security threat such as a recently turned-malicious user. 

Because conventional network management applications provide limited support 
such as support for only a single vendor type of storage system, owners of the network 
may feel trapped into expanding a storage system to include storage system resources of a 
same vendor type even though an owner may otherwise prefer to expand a storage area 

30 network to include a heterogeneous mix of storage systems from multiple vendors to 
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reduce cost. Thus, the burden of having to learn additional network management 
software applications may inhibit expansion of an initially small storage system to 
include storage system resources from multiple vendors. Furthermore, conventional 
network management applications fail to support user-friendly management display 
5 functions to manage entities that enhance a GUI's usefulness. 

Embodiments of the invention significantly overcome the aforementioned and 
other deficiencies of conventional network management applications. In particular, 
embodiments of the invention include mechanisms and techniques for managing network 
resources via a display of a computer device. In one embodiment, the display enables a 

10 user to identify access rights associated with one or most host computers and the ability 
of the host computers to access corresponding storage system resources. The computer 
device illustrating the access rights may be, for example, a network management 
workstation including a network management software application (e.g., a resource 
manager) that presents, during runtime, a graphical user interface to a network manager. 

1 5 The network manager provides input to the graphical user interface to perform different 
management operations such as viewing and/or modifying access rights. Certain 
embodiments of the invention include network management software incorporating the 
functionality explained herein, as well as computerized devices configured to operate as 
explained herein. 

20 More specifically, an embodiment of the invention includes a network manager 

that utilizes a network management software application (running on a network 
management computer station) to manage access control rights of users with respect to 
multiple types of vendor storage systems in a storage area network. Users of the multiple 
types of vendor storage systems typically are provided different access rights to 

25 corresponding network storage resources depending on access settings. The network 
manager utilizes the network management storage application to modify access rights of 
the users and, thus, the ability of the users to access multiple types of vendor specific 
storage system resources. 

In one embodiment, the network manager modifies storage system access rights 

30 associated with one or more users by first viewing an access relationship of the one or 
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more users with respect to one or more corresponding target storage systems. For 
example, the network management storage application generates a graphical user 
interface to the network manager. The graphical user interface includes a display region 
for the network manager to select specific host resources (e.g., host computer resource, 
5 client devices, etc.) of the storage area network. 

The network management storage application generates a section of a display of 
the graphical user interface for the network manager to narrow a viewing of network 
resources associated with the selected one or more host resources. For example, the 
graphical user interface enables the network manager to provide a selection of a specific 

1 0 vendor type of storage system resource in the network. 

Based on the selection of the specific vendor type of storage system resource, the 
graphical user interface displays one or multiple storage resources of the selected vendor 
type. The graphical user interface also includes a display region for the network manager 
to make a selection of a uniquely identified storage system resource of the selected 

1 5 vendor type, which may or may not be associated with the at least one selected host 
resource. Thus, based on selecting a particular storage system resource of a selected 
vendor type, a network manager may "drill down" or narrow a view of storage devices 
(e.g., logical volumes of storage) and corresponding one or more host resources having 
access to the storage devices. 

20 The network management storage application optionally includes additional 

selectable parameters so that the network manager may further narrow and identify 
access relationships associated with the selected at least one host resource with respect to 
storage system resources. For example, the graphical user interface generated by the 
network management storage application may include a display region for the network 

25 manager to make a selection of storage ports associated with a selected storage system 
resource of a selected vendor type. Based on a selected one or more storage ports, the 
graphical user interface identifies which of the selected host resources in the network has 
access to the selected storage system resource. 

The network management storage application further enables the network 

30 manager to display access control rights of the at least one host resource with respect to 
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different vendor types of storage system resources. Additionally, the network 
management storage application and corresponding graphical user interface enables a 
network manager to modify access rights associated with the at least one host resource 
for a selected vendor type. For example, after identifying a target storage system 
5 resource associated with selected host resources, the network management storage 
application enables the network manager to selectively modify access rights of the 
selected host resources with respect to corresponding target storage system resources. 

In one embodiment, the network management storage application generates 
vendor specific commands to modify access rights of the selected host resources 

10 depending on a vendor type of the selected storage system resource. For example, for a 
first selected storage system resource of a first vendor type, the network management 
storage application (when initiated by a network manager) generates a first set of vendor 
specific commands associated with the first vendor type to modify access rights 
associated with the first selected storage system resource. For a second selected storage 

15 system resource of a second vendor type, the network management storage application 
(when initiated by a network manager) generates a second set of vendor specific 
commands associated with the second vendor type to modify access rights associated 
with the second selected storage system resource. Thus, a common graphical user 
interface according to an embodiment of the invention enables a network manager to 

20 modify settings such as access control information for different vendor types of storage 
resources in a storage system. 

More general embodiments of the invention include a technique of enabling a 
processing device to receive a selection of at least one host resource associated with a 
storage area network as selected by a network manager. In addition to receiving the 

25 selection of the at least one host resource, the processing device receives a selection of at 
least one storage parameter associated with the storage area network. The selection of 
the at least one storage parameter includes a selection of a vendor type associated with a 
storage system resource of the storage area network. Based on the selection information, 
the network management application correlates the selection of the at least one host 

30 resource with the selection of the vendor type to identify: i) storage devices of the storage 



EMC04-07(04031) 

-7- 

system resource corresponding to the at least one storage parameter, and ii) access control 
rights of the at least one host resource with respect to the storage devices. Correlating the 
selection of the at least one host resource to a storage system resource of a selected 
vendor type (from multiple vendor types) enables a network manager to manage network 
5 resources in the storage area network via a single network management application rather 
than different software applications for each vendor type. 

In further embodiments and potentially other independent embodiments of the 
invention, the processing device generates an output such as a graphical user interface to 
a display screen. In a first region on the display screen, the processing device displays a 

10 hierarchy of multiple icons representing corresponding host resources in the storage area 
network. The processing device enables a user to expand and/or contract a view of the 
hierarchy of multiple icons to facilitate the selection of the at least one host resource 
associated with the storage area network. 

In relation to at least one of the multiple icons, the processing device maintains 

15 corresponding visual regions on the display to receive input commands from a user 

making the selection of the at least one host resource. Based on clicking in vicinity of a 
corresponding visual region based on use of a mouse, the processing device receives an 
input from a user identifying a selected one or more host resources from the hierarchy of 
multiple icons. 

20 The processing device also generates a region of the display screen to receive an 

input provided by the network manager such as a signal identifying a selected vendor 
type. In response to receiving the selected vendor type, the processing device displays 
storage system resources associated with the selected vendor type. 

In one embodiment, the processing device generating the graphical user interface 

25 provides a unique identifier associated with each of the displayed storage system 

resources of the selected vendor type. Additionally, the processing device enables a user 
to select a storage system resource of the selected vendor type based on the selection of 
the unique identifier. In one application, the unique identifier is a number associated with 
the storage system resource that appears in a display region generated by the graphical 
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user interface. A network manager clicks on one of the unique identifiers to select a 
particular storage system resource. 

In one embodiment, the graphical user interface includes a pull-down menu of 
functional options associated with the selected vendor type. The pull-down menu of 
5 functional options includes: i) a function to display physically connected storage system 
resources associated with the at least one host resource for the selected vendor type, ii) a 
function to display all storage devices in the network associated with the selected vendor 
type, and iii) a function to display physically unconnected storage systems resources 
associated with the at least one host resource for the selected vendor type. Thus, a user 

10 has wide flexibility in determining which target storage system resources and 
corresponding storage devices therein will be displayed for viewing. 

As previously discussed, the processing device receives a signal identifying a 
particular user selected storage system resource of a particular vendor type. For the 
particular user selected storage system resource, the graphical user interface displays 

15 access ports associated with the selected storage system of the selected vendor type. The 
access ports identify communication ports through which host resources may access 
corresponding storage devices (e.g., logical storage segments) in the particular user 
selected storage system resource. In one application, the graphical user interface enables 
a user to modify a selection of the displayed access ports so that a network manager can 

20 identify which of the selected host resources is able to access or not access the particular 
user selected storage system resource through the selected access ports. 

In one embodiment, the graphical user interface displays a related tree selection in 
a region of the display screen. The related tree selection indicates which, if any, of the 
selected at least one host resource has access rights to at least one corresponding storage 

25 device in the selected storage system resource. If a selected host resource has no access 
rights to any of the storage devices in the selected storage system resource, then the host 
resource will not be listed in the related tree selection of the graphical user interface. 
Thus, a network manager can utilize the information in the related tree selection to 
quickly determine whether a selected host resource has access to any storage devices 

30 associated with the selected storage system resource of the selected vendor type. 
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After receiving selection of a particular storage system resource of a selected 
vendor type as well as selection of access ports, the graphical user interface provides a 
display region of corresponding storage devices in the selected storage system resource 
that are accessible via the selected access ports. 
5 In one embodiment, the display region includes a visual indication such as a table 

indicating whether any of the at least one host resource has access rights with respect to a 
corresponding storage device. For example, the graphical user interface provides an 
indication which, if any, of the host resources in the network has access rights to 
corresponding storage devices in the selected storage system resource. 

10 To modify access rights, the network manager selects a particular storage device. 

The graphical user interface receives a signal indicating the selected at least one storage 
device and, in turn, generates a display (e.g., a new window) for the network manager to 
modify access rights associated with the selected at least one storage device. Thus, the 
network manager can select one or more storage devices and then modify access rights 

1 5 associated with selected host resources. 

As discussed, techniques of the invention are well suited for use in applications in 
which a network manager manages a storage area network including multiple host 
resources and a corresponding storage system of heterogeneous storage system resources. 
However, it should be noted that embodiments of the invention are not limited to use in 

20 such applications and thus embodiments of the invention are well suited for other 
applications as well. 

Other embodiments of the invention include a computerized device (e.g., a host 
computer, workstation, etc.) configured to support the aforementioned method operations 
disclosed herein as embodiments of the invention to provide a relationship view and 

25 associated resource management operations. In such embodiments, the computerized 
device includes a display, a memory system, a processor (e.g., a processing device) and 
an interconnect. The interconnect supports communications among the display, the 
processor and the memory system. The memory system is encoded with a resource 
management application that, when executed on the processor, produces a resource 

30 management process that includes a graphical user interface produced on the display of 
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the computerized device. The graphical user interface allows the resource management 
process to perform all of the method embodiments and operations explained herein as 
embodiment of the invention. 

Yet other embodiments of the invention disclosed herein include software 
5 programs to perform the method embodiment and operations summarized above and 
disclosed in detail below under the heading Detailed Description of Preferred 
Embodiments. More particularly, a computer program product (e.g., a computer-readable 
medium) including computer program logic encoded thereon may be executed on a 
computerized device to support generation and display of relationship views and 

10 associated operations as explained herein. The computer program logic, when executed 
on at least one processor with a computing system, causes the processor to perform the 
operations (e.g., the methods) indicated herein as embodiments of the invention. Such 
arrangements of the invention are typically provided as software, code and/or other data 
structures arranged or encoded on a computer readable medium such as an optical 

1 5 medium (e.g., CD-ROM), floppy or hard disk or other a medium such as firmware or 
microcode in one or more ROM or RAM or PROM chips or as an Application Specific 
Integrated Circuit (ASIC) or as downloadable software images in one or more modules, 
shared libraries, etc. The software or firmware or other such configurations can be 
installed onto a computerized device to cause one or more processors in the computerized 

20 device to perform the techniques explained herein as embodiments of the invention. 
Software processes that operate in a collection of computerized devices, such as in a 
group of storage area network management servers, can also support embodiments of the 
invention. 

One more particular embodiment of the invention is directed to a computer 
25 program product that includes a computer readable medium having instructions stored 
thereon for supporting management of network resources. The instructions, when carried 
out by a processor of the first data communication device, cause the processor to perform 
the steps of: i) receiving a selection of at least one host resource associated with a 
storage area network; ii) in addition to receiving the selection of the at least one host 
30 resource, receiving a selection of at least one storage parameter associated with the 
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storage area network, the selection of the at least one storage parameter including 
selection of a vendor type associated with a storage system resource; and iii) correlating 
the selection of the at least one host resource with the selection of the at least one storage 
parameter to identify: a) storage devices of the storage system resource corresponding to 
5 the at least one storage parameter, and b) access control rights of the at least one host 
resource with respect to the storage devices. Other arrangements of embodiments of the 
invention that are disclosed herein include software programs to perform any of the 
method embodiment steps and operations summarized above and disclosed in detail 
below. 

1 0 It should be understood that the system of the invention could be embodied as a 

software program or as a software program operating in conjunction with corresponding 
hardware. Example embodiments of the invention may be implemented within EMC's 
Control Center (ECC) software application that provides graphical management 
functionality for storage area network resources and in computerized devices that operate 

1 5 the Control Center (ECC) software. Control Center software is manufactured by EMC 
Corporation of Hopkinton, Massachusetts, USA. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing and other objects, features, and advantages of the invention will be 
20 apparent from the following more particular description of preferred embodiments of the 
invention, as illustrated in the accompanying drawings in which like reference characters 
refer to the same parts throughout the different views. The drawings are not necessarily 
to scale, with emphasis instead being placed upon illustrating the embodiments, 
principles and concepts of the invention. 
25 FIG. 1 is a block diagram of a storage area network and management station 

configured to operate according to an embodiment of the invention. 

FIG. 2 is a block diagram of a suitable device for executing techniques according 
to an embodiment of the invention 

FIG. 3 is a block diagram illustrating a relationship between host resources and 
30 corresponding storage devices according to an embodiment of the invention. 
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FIG. 4 is a screenshot of a graphical user interface according to an embodiment of 
the invention. 

FIG. 5 is a screenshot of a graphical user interface according to an embodiment of 
the invention. 

5 FIG. 6 is a flowchart illustrating general technique for managing network 

resources according to an embodiment of the invention. 

FIG. 7 is a flowchart illustrating a technique for managing network resources 
according to an embodiment of the invention. 

FIGS. 8A 5 8B, and 8C combine to form a flowchart illustrating a more detailed 
10 technique for managing network resources according to an embodiment of the invention. 

FIG. 9 is a screenshot of a display screen generated according to an embodiment 
of the invention. 

FIG. 10 is a screenshot of a display screen generated according to an embodiment 
of the invention. 

1 5 FIG. 1 1 is a screenshot of a display screen generated according to an embodiment 

of the invention. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

In one embodiment of the invention, a processing device such as a computer 

20 receives a selection of at least one host resource associated with a storage area network as 
selected by a network manager. In addition to receiving the selection of the at least one 
host resource, the processing device receives a selection of at least one storage parameter 
associated with the storage area network. The selection of the at least one storage 
parameter includes a selection of a vendor type of a storage system resource of the 

25 storage area network. Based on the selection information, the processing device 

correlates the selection of the at least one host resource with the selection of the vendor 
type to identify: i) storage devices of the storage system resource corresponding to the at 
least one storage parameter, and ii) access control rights of the at least one host resource 
with respect to the storage devices. Correlating the selection of the at least one host 

30 resource to a storage system resource of a selected vendor type (from multiple vendor 
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types) enables a network manager to manage network resources in the storage area 
network via a single network management application rather than different network 
management software applications for each vendor type. 

FIG. 1 illustrates a network system 100 (e.g., a storage area network) suitable for 
5 use in explaining an operation of example embodiments of the invention. As shown, the 
network system 100 includes a network medium 101 such as a high-speed data 
communications medium (e.g., Ethernet, optical network, or other type of network) that 
interconnects a plurality of components such as storage resources 1 02- 1 , 1 02-2, ... 1 02-N, 
storage area network switches 103-1, 103-M, host devices (e.g., host servers) 104-1, 

10 104-2, 104-P, client devices 105-1, 105-2,..., 1 05 -S, and computer system 110(e.g.,a 
storage area network management station). 

Computer system 1 10 is configured, in this example, as a storage area network 
management station operated by network manager or user 108 (e.g., a user responsible 
for managing the resources within the storage area network 100). Computer system 110 

15 executes a resource manager application 120 (e.g., a software graphical user interface 

application more particularly shown in FIG. 2) that generates and displays information in 
accordance with embodiments of the invention as will be explained herein. The resource 
manager 120 in this example may be any type of network management software 
application that executes, performs or otherwise operates within the management station 

20 computerized system 110. It should be noted that computer system 110 may include 
certain other components such as one or more internal devices as well as software 
applications or processes that operate within or in conjunction with the illustrated 
components and devices in FIG. 1 . 

As shown towards the top of FIG. 1, and of particular interest to discussion of this 

25 invention, the management station computer system 1 10 is a computer device including 
corresponding display 130 (e.g., a monitor or other visual display device) generated by 
resource manager 120 operating to display a graphical user interface 150 as explained 
herein. User 108 provides input commands to control what information (e.g., tables, pop- 
up screens, etc.) is displayed on display 130. 
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The graphical user interface 150 configured in accordance with embodiments of 
the invention includes a hierarchical arrangement of icons 160 (e.g., a hierarchy of 
vertically disposed icons), parameter selection region 164, and display region 162, the 
latter of which includes configuration information associated with network system 100. 
5 Icons on display 130 represent managed hardware and software entities associated with 
network 100. Generally, and as will be explained in more detail shortly, the graphical 
user interface 150 enables a user 108 of the computer system 1 10 to select one or more 
icons (e.g. host resources) from the hierarchical arrangement of icons 160 displayed on 
the left side of display 130 and display configuration information. 

10 FIG. 2 is a block diagram illustrating an example architecture of computer system 

110 (e.g., a storage area network management station) according to embodiments of the 
invention. Computer system 1 10 may be a computerized device such as a personal 
computer, workstation, portable computing device, console, network terminal or the like. 
As shown, computer system 1 10 of the present example includes an interconnect 1 1 1 that 

15 couples a memory system 1 12, a processor 1 13, an input/output interface 1 14 and a 
communications interface 115. Peripheral device 116 (e.g., one or more viewer 
controlled devices such as a keyboard, mouse, etc.) couples to processor 113 through I/O 
interface 1 14 and enables user 108 to provide input commands and thus generally control 
display management functions associated with graphical user interface 150. Database 

20 125 stores managed objects 210 associated with managed entities (e.g., hardware and 

software entities associated with host devices 104, storage resources 102, etc.) in network 
system 100. Communications interface 115 enables computer system 1 10 (and 
corresponding user 108) to communicate with other devices (i.e., resources) associated 
with network 100. 

25 As shown, memory 1 12 is encoded with resource manager application 120-1 

supporting generation, display, and implementation of functional operations of graphical 
user interface 150. Resource manager application 120-1 may be embodied as software 
code such as data and/or logic instructions (e.g., code stored in the memory or on another 
computer readable medium such as a disk) that supports processing functionality 

30 according to different embodiments of the invention as described herein. During 
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operation, processor 113 accesses memory 1 12 via the interconnect 1 1 1 in order to 
launch, run, execute, interpret or otherwise perform the logic instructions of the resource 
manager application 120-1. Execution of resource manager application 120-1 produces 
processing functionality in resource manager process 120-2. In other words, the resource 
5 manager process 120-2 represents one or more portions of the resource manager 
application 120-1 (or the entire application 120-1) performing within or upon the 
processor 1 13 in the computerized device 110. 

It should be noted that the resource manager 120 executed in computer system 
1 10 is represented in FIG. 2 by either one or both of the resource manager application 

10 120-1 and/or the resource manager process 120-2. For purposes of the discussion of the 
operation of embodiments of the invention, general reference will be made to the 
resource manager 120 as performing the various steps and functional operations to carry 
out the features of embodiments of the invention. 

It should also be noted that embodiments of the invention include the resource 

15 manager application 120-1 itself (i.e., the un-executed or non-performing logic 

instructions and/or data). The resource manager application 120-1 may be stored on a 
computer readable medium such as a floppy disk, hard disk or in an optical medium. The 
resource manager application 120-1 may also be stored in a memory type system such as 
in firmware, read only memory (ROM), or, as in this example, as executable code within 

20 the memory system 112 (e.g., within Random Access Memory or RAM). In addition to 
these embodiments, it should also be noted that other embodiments of the invention 
include the execution of resource manager application 120-1 in processor 1 13 as the 
resource manager process 120-2. Thus, those skilled in the art will understand that the 
computer system 110 may include other processes and/or software and hardware 

25 components, such as an operating system that controls allocation and use of hardware 
resources. 

Display 130 need not be coupled directly to computer system 100. For example, 
the resource manager 120 can be executed on a remotely accessible computerized device. 
In this instance, the graphical user interface 150 may be displayed locally to the user, 
30 while the resource manager process 120 is executed remotely. 
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To generate displayed information in graphical user interface 150, the host 
computer system 1 10 (e.g., the resource manager process 120-2) extracts information 
from managed objects 210 stored in database 125. For example, in one embodiment, the 
resource manager 120 receives an identity of at least one selected host resource 
5 associated with the storage area network. Based on the selected host resource, the 
resource manager 120 extracts information associated with the first managed object 
associated with the selected host resource as well as other managed objects from 
management database 125. Thereafter, resource manager 120 identifies at least one 
storage system resource associated with the selected host resource based on i) 

10 information in the first managed object, and ii) information in other corresponding 
managed objects 2 1 0 in the management database. 

Graphical user interface 150 generated by resource manager 120 provides user 
108 an ability to display access control rights of the at least one selected host resource 
with respect to different vendor types of storage system resources. For example, based 

1 5 on processing of retrieved information, the resource manager 120 identifies an access 
relationship between the selected host resource and storage devices associated with the 
storage system resources. Display 130 includes: i) a first region for the user to make the 
selection of the host resource, ii) a second region for the user to make a selection of at 
least one storage parameter, and iii) a third region for viewing the storage devices 

20 associated with the at least one host resource based on a user selected at least one storage 
parameter. 

In one embodiment, computer system 100 extracts information from database 125 
using SQL (Structured Query Language) and stores the information in data structures for 
processing. For example, database 125 contains managed objects 210 (e.g., database 
25 records, tables, data structures, etc.) associated with various hardware and software 

entities associated with network system 100. In one embodiment, database 125 includes 
managed objects 210 corresponding to host resources and storage resources in network 
system 100. More details regarding use of managed objects 210 will be discussed in 
connection with FIG. 3. 
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FIG. 3 is a block diagram illustrating connectivity of resources in a storage area 
network 300 according to an embodiment of the invention. As shown, storage area 
network 300 includes host resource 304-1 and host resource 304-2 (collectively, host 
resources 304), network 340 (e.g., a high speed fiber based switch fabric), network 350, 
5 storage system resource 375-1, storage system resource 375-2, computer system 1 10, and 
database 125. Host resource 304-1 includes adapter 315-1 and corresponding port 320-1 
and port 320-2 to communicate over network 340. Similarly, host resource 304-2 
includes adapter 315-2 and corresponding port 322-1 and port 322-2 to communicate 
over network 340. Storage system resource 375-1 includes respective adapters 360-1 and 

10 360-2, corresponding ports 354-1, 354-2, 354-3, 355-1 and 355-2, access controllers 
362-1 and 362-2, storage devices 365-1 and 365-2, maps 370-1 and 370-2, as well as 
physical storage devices 380-1 and 380-2. 

In general, storage area network 300 illustrates a network configuration in which 
host resources 304 (e.g., clients) access storage system 375. Note that storage area 

15 network 300 includes multiple storage systems 375 of different vendor types accessible 
by different host resources 304. For example, storage system 375-1 is manufactured by a 
first vendor type while storage system 375-2 is manufactured by a second vendor type, 
and so on. 

Storage system resource 375-1 includes access controllers 362 that utilize 
20 configuration information to identify which resources 304 have access rights to 

corresponding storage devices 365. Host resources 304 may be configured to access 
storage system resources 375 along particular connection paths. For example, host 
resource 304-1 may be configured to communicate via adapter 315-1 (e.g., a host bus 
adapter) through port 320-1, network 340, and port 354-2 of adapter 360-1 (e.g., fiber 
25 channel adapter) to storage system resource 375-1 . As its name suggests, access 

controller 362-1 in the connective path facilitates access to respective storage devices 365 
depending on an access control configuration. That is, in this example, host resource 304 
is limited to access certain storage devices in storage system resource 375-1 based on 
access configuration settings. 
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In one embodiment, storage devices 365 are configured as logical portions of one 
or more physical storage devices 380 (e.g., arrays of storage disks). Maps 370 provide a 
mapping of storage devices 365 (e.g., logical volumes) to corresponding physical storage 
devices 380. 

5 As discussed, computer system 1 10 includes database 125 of managed objects 

210. Database 125 tracks configuration information (e.g., access control settings) 
associated with storage area network 300 and, more particularly, access rights of host 
resources 304 with respect to storage system resources 375. In one embodiment, 
database 125 continuously receives up-to-date connectivity relationship and configuration 

10 settings associated with storage area network 300. For example, computer system 1 10 
communicates over network 350 (e.g., LAN, WAN, etc.) to receive configuration 
information for storage in database 125. Sources providing the configuration 
information may include storage system resource 375, host resources 304, as well as 
other sources in storage area network 300. In one embodiment, agents at corresponding 

1 5 host resources 304 communicate with storage systems resources 375 that, in turn, 

communicate configuration information to resource manager for storage in database 125. 

FIG. 4 is a screenshot 400 displayed on display 130 according to an embodiment 
of the invention. As shown, region 160 of screenshot 400 includes hierarchy of icons 401 
representing managed objects (e.g., hardware and software resources) associated with 

20 storage area network 300. Display region 160 also includes display regions 405, which 
may be toggled (e.g., via user 108 clicking on them) to identify host resources and 
storage resources selected by user 108. Screenshot 400 also includes parameter selection 
region 164 enabling user 108 to select storage parameters associated with storage area 
network 300. In one embodiment, parameter selection region 164 includes vendor 

25 selection pull-down menu 410 for a user 108 to select a particular vendor type associated 
with a resource such as a storage system resource 375 in storage area network 300. 

Display region 415 includes IDs or identification numbers 422 (that may be 
unique names such as text or numeric unique identifiers) associated with corresponding 
storage system resources 375 associated with selected host resources 405 (assuming 

30 "physically connected" has been selected in pull-down menu 420 as shown). Pull-down 
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menu 420 enables a user 108 to view different sets of storage system resources 375 in 
display region 415. For example, selection of the "physically connected 1 ' entry in pull 
down menu 420 causes display region 415 to show all storage system resources 375 of a 
selected vendor type for those storage resources in which there is a physical connection 
5 with a selected host resource in visual region 405. Pull-down menu 420 includes a 
selectable option for showing all storage system resources 375 associated with storage 
area network 300 rather than just those physically connected to at least one selected host 
resource in visual region 405. Additionally, pull-down menu 420 includes a selectable 
option of "physically unconnected" for a user to display storage system resources 375 in 
10 display region 415 in which there is no physical connection with any of the selected host 
resources. 

Display region 430 includes a list of adapters 360 (e.g., Fiber Adapters) 
associated with the selected identification number 422-1 in display region 415. Shading 
in display region 415 indicates which storage system resource identification number 422 
15 of a selected vendor type has been selected. 

Display region 430 supports functionality allowing user 108 to modify a default 
selection of all ports 354 and adapters 360 associated with a selected storage system 
resource identification number 422-1. Thus, user 108 can narrow or expand a number of 
storage devices 365 displayed in display region 162 by deselecting or selecting resources 
20 in display region 430. 

After providing selection information in parameter selection region 164, the user 
108 clicks on show devices icon 432. Clicking on icon 432 in parameter selection region 
164 causes computer system 1 10 to display access configuration information in display 
region 162. Display region 440, above icon 432, includes a list of selected host resources 
25 405 (e.g., including a check mark next to an entry) that are able to access at least one 
storage device 365 listed in table 446 of display region 162. Pull-down menu 444 
enables user 108 to selectively filter which storage devices are shown in display region 
162. As shown, user 108 has selected the "all devices" option. 

As discussed, display region 162 includes table 446 to display access 
30 configuration information of host resources 304 with respect to storage devices 365. For 
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example, column 452 includes a list of storage device icons 465 associated with selected 
storage system resource in display region 415. For each storage device icon 465 
(corresponding to a storage device 365 in FIG. 3), information in column 454 identifies if 
any of the selected host resources 405 have corresponding access rights to storage 
5 devices 365 listed in column 452. Column 456 specifically identifies which host 
resources 304 have access to corresponding storage devices 365. 

Thick line 455 in relation to a storage device icon 465 in column 452 identifies 
that more than one host resource has access rights to the corresponding storage device. 
Column 456 corroborates a number of owners as well as their IDs associated with the 

10 storage device icon 465. Thin line 450 in relation to a storage device icon 465 in column 
452 identifies only one host resource has access rights to the corresponding storage 
device. Note that no line underscoring the device icons in column 452 indicates that no 
hosts have access rights to this device. Thus, the use of these non-textual symbols in 
relation to a storage device icon 465 convey information to user 108 about the 

1 5 corresponding storage devices 365 in storage area network 300. 

Clicking on icon 490 changes a view associated with display region 162. For 
example, after user 108 clicks on icon 490, the display of storage devices 365 changes to 
a similar format as that shown in FIG. 5. User 108 may toggle between views in FIG. 4 
and FIG. 5 by clicking on icon 490. 

20 FIG. 5 is a screenshot 500 illustrating an alternative display of storage device 

icons according to an embodiment of the invention. As shown, storage device icons 465 
include related symbols, shading, coloring, etc. to identify attributes associated with the 
corresponding storage device 365. 

General functionality supported by computer system 110 according to 

25 embodiments of the invention will now be discussed with respect to flowchart 600 in 
FIG. 6 as briefly discussed above with respect to FIGS. 1 and 2. 

FIG. 6 is a flowchart 600 of processing steps performed by resource manager 120 
according to an embodiment of the invention. In general, flowchart 300 illustrates how 
resource manager 120 enables user 108 of the management station computer system 1 10 

30 to display management views associated with selected managed entities of storage area 
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network 300. Note that the discussion of FIG. 6 will include occasional references 
techniques and features discussed in the previous figures. 

In step 610, resource manager 120 receives a selection of at least one host 
resource 304 associated with a storage area network 300 as selected by a user 108 such as 
5 a network manager. As mentioned, user 108 clicks on display region 405 to select one or 
more host resources 304. 

In step 620, in addition to receiving the selection of the at least one host resource 
304, the resource manager 120 receives a selection of at least one storage parameter 
associated with the storage area network 300. The selection of the at least one storage 
10 parameter includes a selection from user 108 of a vendor type associated with a storage 
system resource 375 of the storage area network 300. 

In step 630, based on the selection information, the resource manager 120 
correlates the selection of the at least one host resource 304 with the selection of the 
vendor type to identify: i) storage devices 365 of the storage system resource 375 
1 5 corresponding to the at least one storage parameter, and ii) access control rights of the at 
least one host resource 304 with respect to the storage devices 365. Correlating the 
selection of the at least one host resource 304 to a storage system resource 375 of a 
selected vendor type (from multiple vendor types) enables a network manager such as 
user 108 to manage network resources in the storage area network 300 via a single 
20 network management application rather than a different application for each vendor type. 

FIG. 7 is a flowchart 700 of processing steps performed by resource manager 120 
according to an embodiment of the invention. 

In step 705, the resource manager 120 provides a user an ability to display access 
control rights of the selected one or more host resources with respect to different vendor 
25 types of storage system resources via use of a common graphical user interface 1 50 (e.g., 
via different screenshots). 

In step 710, the resource manager 120 and corresponding graphical user interface 
150 enables a user 108 to modify access rights associated with the at least one host 
resource 304 for a selected vendor type of storage system resource 375. For example, 
30 after identifying a target storage system resource 375 associated with the selected host 
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resources 304, the resource manager 120 enables the network manager to selectively 
modify access rights of the selected host resources 304 with respect to corresponding 
target storage system resources 375. 

In step 715, the resource manager 120 generates vendor specific commands to 
5 modify access rights of the selected host resources 304 depending on a vendor type of the 
selected storage system resource 375. 

For example, in step 720, for a first selected storage system resource 375 of a first 
vendor type, the resource manager 120 (when initiated by a network manager) generates 
a first set of vendor specific commands associated with the first selected vendor type to 

10 modify access rights associated with the first selected storage system resource 375. 
Resource manager 120 transmits the generated vendor specific commands to the first 
selected storage system 375 to update the access right settings. 

In step 725, for a second selected storage system resource 375 of a second vendor 
type, the resource manager 120 generates a second set of vendor specific commands 

1 5 associated with the second selected vendor type to modify access rights associated with 
the second selected storage system resource. Resource manager 120 transmits the 
generated vendor specific commands to the first selected storage system 375 to update 
the access right settings. Thus, a common graphical user interface 150 according to an 
embodiment of the invention generates commands for different types of vendor storage 

20 resources enabling a network manager to modify settings such as access control 

information for different vendor types of storage resources in a storage area network 300. 

FIGS. 8 A, 8B, and 8C combine to form flowchart 800 illustrating processing 
steps performed by resource manager 120 in accordance with a more specific example 
embodiment of the invention. As discussed, resource manager 120 enables user 108 of 

25 the management station computer system 1 10 to view and modify access rights 

associated with resources in storage area network 300. Note that flowchart 800 may 
overlap with respect to other flowcharts discussed herein. Also, note that the steps in any 
of the flowcharts need not be performed in the order shown. 

In step 805, resource manager 120 (e.g., or processing device therein) generates 

30 an output such as a graphical user interface 1 50 to display 130. 
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In step 810, in a first region on the display 130, the resource manager 120 
displays a hierarchy of multiple icons 401 representing corresponding host resources 304 
in the storage area network 300. 

In step 815, the resource manager 120 enables a user to expand and/or contract a 
5 view of the hierarchy of multiple icons 401 to facilitate the selection of the at least one 
host resource 304 associated with the storage area network 300. 

In step 820, in relation to at least one of the multiple icons, the resource manager 
120 maintains corresponding display regions 405 on the display 130 to receive input 
commands from a user 108 making the selection of the at least one host resource 304. 
10 In step 825, based on clicking in vicinity of a corresponding display region 405 

via use of a mouse, the resource manager 120 receives an input from a user 120 
identifying a selected one or more host resources 304 from the hierarchy of multiple 
icons 401. 

In step 830, the resource manager 120 generates a region of the display 130 (e.g., 
15 display region 41 5) to receive an input, initiated by the user 108, such as a signal 
identifying a selected vendor type. 

In step 835, in response to receiving the selected vendor type, the resource 
manager 120 displays storage system resources 375 associated with the selected vendor 
type. 

20 In step 840, the resource manager 120 generating the graphical user interface 150 

provides a unique identifier 422 associated with each of the displayed storage system 
resources 375 of the selected vendor type. 

In step 845, the resource manager 120 enables a user 108 to select a storage 
system resource 375 of the selected vendor type based on selection of a unique storage 

25 system resource identifier 422. In one application, the unique identifier 422 is a number 
associated with the storage system resource 375 that appears in display region 415 
generated by the graphical user interface 150. As discussed, a user 108 clicks on one of 
the unique identifiers to select a particular storage system resource 375. 

In step 850, graphical user interface 150 provides a pull-down menu 420 of 

30 functional options associated with the selected vendor type. The pull-down menu 420 of 
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functional options includes: i) a function to display physically connected storage system 
resources 375 associated with the at least one host resource for the selected vendor type, 
ii) a function to display all storage system resources 375 associated with the selected 
vendor type, and iii) a function to display physically unconnected storage systems 
5 resources 375 associated with the at least one host resource for the selected vendor type. 
Thus, a user has wide flexibility in determining which target storage system resources 
375 and corresponding storage devices 365 therein will be displayed for viewing on 
display 130. 

In step 855, the resource manager 120 receives a signal identifying a particular 

10 user selected storage system resource 375 of a particular vendor type. 

In step 860, for the particular user selected storage system resource, the graphical 
user interface 150 displays access ports 354 associated with the selected storage system 
375 of the selected vendor type. The access ports identify communication ports through 
which host resources 304 may access corresponding storage devices 365 (e.g., logical 

1 5 storage segments) in the particular user selected storage system resource 375. 

In step 865, the resource manager 120 via graphical user interface 150 enables a 
user 108 to modify a selection of the displayed adapters 360 and access ports 354 so that 
a user 108 can identify which of the selected host resources 304 is able to access or not 
access the particular user selected storage system resource 375 through the selected 

20 access ports 354. 

In step 870, graphical user interface 150 displays a related tree selection in display 
region 440 on the display 130. As discussed, the related tree selection 440 indicates 
which, if any, of the selected at least one host resource 304 has access rights to at least 
one corresponding storage device 365 in the selected storage system resource 375. If a 

25 selected host resource 304 has no access rights to any of the storage devices 365 in the 
selected storage system resource 375, then the host resource 304 will not be listed in the 
related tree selection of the graphical user interface. Thus, a user 108 can utilize the 
information in the related tree selection to quickly determine whether a selected host 
resource has access to any storage devices associated with the selected storage system 

30 resource of the selected vendor type. 
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In step 875, after receiving selection of a particular storage system resource 375 
of a selected vendor type as well as selection of access ports 354, the graphical user 
interface 150 generates table 446 including a display of corresponding storage devices 
365 in the selected storage system resource 375 that are accessible via the selected access 
5 ports 354. 

In step 880, resource manager 120 generates table 446 indicating which host 
resources 304 have access rights with respect to corresponding storage devices 365. For 
example, the graphical user interface 150 provides an indication which, if any, of the host 
resources in the network have access rights to corresponding storage devices 365 in the 
10 selected storage system resource as indicated by unique identifier 422-1 . 

In step 885, resource manager 120 receives a signal indicating a selection of a 
particular storage device icon 465 corresponding to a storage device 365. 

In step 890, in response to the signal, the resource manager 120 generates a 
display for the user 108 to modify access rights associated with the selected at least one 
15 storage device. Thus, the user 108 can select one or more storage devices 365 and then 
modify access rights with respect to different host resources 304. In other words, the user 
may allow more or fewer host resources 304 to access a selected storage device 365. 

FIG. 9 is a screenshot 900 generated by graphical user interface 150 according to 
an embodiment of the invention. In general, this embodiment of the invention illustrates 
20 different display graphics generated by graphical user interface 108 when a user selects a 
different vendor type of storage system resource such as a Hewlett Packard type storage 
system. 

As shown, user 108 selects HP XP-512 via vendor selection pull-down menu 910. 
Thereafter, user 108 selects HPS 12-1 (i.e., storage system resource 922-1) in display 
25 region 915. Display region 920 displays storage ports associated with the selected 

storage system resource 922-1. Display region 930 illustrates the ability to select WWN 
groups. Clicking on icon 940 causes graphical user interface 150 to generate pop-up 
window 1 1 10 in FIG. 1 1 illustrating members of the selected group in display region 930. 
Clicking on icon 990 produces graphics in display region 962 for viewing by user 108. 
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Referring again to FIG. 9, to update or change access rights, user 108 selects 
icons 960 in display region 962. The icons become shaded or highlighted when selected 
by user 108. Thereafter, user 108 right clicks a corresponding mouse to select a function 
of adding access rights associated with the selected icons 960. Upon doing so, graphical 
5 user interface 150 generates screenshot 1000 in FIG. 10. In screenshot 1000 in FIG. 10, 
user 108 clicks on icon 1020 to grant selected host resources 905 (in FIG. 9) access rights 
to resources identified by icons 960 (e.g., LUN Group 3, LUN group 4, storage device 
4:650, and storage device 9:083). 

As discussed, techniques of the invention are well suited for use in applications in 
10 which a network manager manages a storage area network including multiple host 

resources and a corresponding storage system of heterogeneous storage system resources. 
However, it should be noted that embodiments of the invention are not limited to use in 
such applications and thus embodiments of the invention are well suited for other 
applications as well. 

15 While this invention has been particularly shown and described with references to 

preferred embodiments thereof, it will be understood by those skilled in the art that 
various changes in form and details may be made therein without departing from the 
spirit and scope of the invention as defined by the appended claims. Such variations are 
intended to be covered by the scope of this invention. As such, the foregoing description 

20 of embodiments of the invention is not intended to be limiting. Rather, any limitations to 
embodiments of the invention are presented in the following claims. 



